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(57) Abstract 



The invention relates to a transac- 
tion system and method involving a mo- 
bile tenninal having service-caxd trans- 
action functions. The transaction sys- 
tem comprises a wireless LAN hav- 
ing at least one txansaction terminal, 
and at least one mobile tenninal. The 
mobQe terminal preferably comprises 
means for implementing at least one vir- 
tual service card, and the service-card 
transaction functions indude functions 
for handling virtual service cards. The 
mobile terminal is coonectable to ttie 
wireless LAN to enable a sendee card 
transaction, related to the virtual service 
card, between the mobile and a transac- 
tion terminal via the wireless LAN. 
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1 

SERVICE CARD TRANSACTIONS 
OVER A WIRELESS LAN 

TECHNICAL FIELD OP THE DTVEKTIOK 

The present invention relates to a mobile terminal having service-card 
transaction fonctions, and a transaction system and method involving such 
a mobile terminal. 

BACKGISOUIID OF THE raVENTION 

The need to use service cards, such as credit cards, cash cards and company- 
identity cards, in place at shops, stores, company locations and public utilities 
is well known. Today, this need is satisfied throu^ various pl^tic cards 
interworking with card readers in a knovm manner. The card is normally 
inserted into a card slot in the card reader, and subsequently the card reader 
reads information from the card. For certain types of smart cards, information 
can also be transferred to the card. Modem card readers for credit cards 
normally have a keypad for entering a PIN-code (Personal Identification 
Number Code) and accepting tihe transaction. Cash cards do not normally 
require a PIN-code; orOy an acceptance or a rqectbn of the transaction. The 
card reader may also have functions to handle cash register sumis from an 
electronic cash register and Amotions for on-line control of credit card 
ntambers. 

Although the iise of credit cards and other types of service cards has become 
very p)opvilar, conventional card and card reader systems has certain 
drawbacks which provide a barrier to more widespread xise and prevent new 
applications. 

For example, conventional card readers are a limiting factor for using smart 
cards. In an effort to alleviate this problem to some extent, so-called 
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contactiess smart cards have been introduced. Contactiess smart cards use a 
radio contact of very short distance (typically up to 40 centimeters), and a 
connection is established between the card reader and the smart card by 
energizing the card through a radio signal from the card reader. 

5 

Another limiting factor is the amoimt of plastic cards to be handled. It is not 
vmusxial for an individual to have a dozen different plastic cards, and this is of 
course quite inconvenient. 

10 In addition, with ordinary plastic cards it is sometimes necessary to hand over 
the card to for example a waiter at a restaurant in order to pay- In that case, 
the cardholder is not in control of the card during payment 

RELATED ART 

15 

Motorola, Siemens and Alcatel offer a dual-slot mobile phone by which it is 
possible to insert a cash-card into an extra card slot in the phone. The mobile 
phone is provided with a card reader for cash cards, and by using the 
conventional radio interface of the mobile phone it is envisaged that a 
20 connection may established with a special server in a bank for loading the 
cash-card. 

Ttxt international patent application WO 97/45814 discloses a wireless 
terminal used for remote purchase and bill payment transactions as well as 

25 transfer of telecash to other terminals without using the GSM network. More 
specifically, the terminal is a muobile phone, which can also operate as an 
electronic wallet. By using the terminal the user is able to send/recer^e 
payment messages axui electroruc cash direct^ to/from another terminal 
under a small adjustable terrniruilio^terTn^ radio coverage. The terminal-to- 

30 terminal radio coverage is adjusted such that onty the payer and the payee will 
be able to exchange infonnadon and telecash, without using the network. 
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Microsoft Corporation offers an electronic wallet software in which infonnation, 
such as card number and expiry date, associated with a plastic card can be 
stored in a personal computer and used for the purpose of Internet commerce. 

5 U.S. Patent 5,796,832 discloses a financial information and transaction 
system in which a portable terminal is conhectsed to a financial institution via a 
wireless or cellular tdephone hook-up. Smart cards are utilized to verify 
authorization for transactions to minimize potential security problems, which 
could otherwise result fit)m tiie use of a mobile terminal. The system according 
10 to U.S. Patent 5,796,832 seems to be adapted for transactions ovct longer 
distances, in similarity to electronic commerce over the Internet. 

SUMMASY OF THE IHVENTIOH 

15 The present invention overcomes these and other drawbacks of the prior art 
arrangements. 

It is a general object of the present invention to provide an improved 
transaction ^rstem and method. 

20 

In particular, it is important that the transaction system is more flexible than 
conventional sjrstems, and capable of handlii^ various different transaction 
conditions in an efficient manner. 

25 It is another object of the invention to provide a mobile terminal, which is 
convenient to use for local service card transactions. 

These and otiier objects are met by the invention as defined by the 
accompanying patent claims. 

30 

The general idea according to the present invention is to use a v^ireless local 
area network, a so-called wireless LAN, and one or more mobile terminals that 
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are cx>nnectable to the wireless LAN, as a platform for service card 
transactions. 

The transaction sjrstem according to a preferred embodiment of the invention 
5 comprises at least one wireless LAN having at least one transaction terminal, 
and at least one mobile terminal. The mobile terminal comprises service-card 
transaction functions, and means for implementing at least one virtual service 
card siach as a credit card or a cash card. Preferably, the service-card 
transaction functions are implemented as a general platform, for example in 

10 the form of an electronic wallet, which is capable of handling virtual service 
cards. Furthermore, the mobile terminal is comiectable to the wireless LAN to 
enable a service card transaction between the mobile terminal and a 
transaction terminal via the wireless LAN. Together with the electronic wallet, 
the virtual service cards in the mobile traninal can be used for local service 

15 card transactions over the wireless LAN. 

In this way, an ef&dent and flexible transaction ^stem is obtained. 

By using a wireless LAN, relativety long distances between a transaction 
terminal and a mobile terminal can be handled. The S5rstem is also capable of 
handling a transaction environment in which many transactions are 
performed more or less in parallel between several parties, irrespective of the 
distance between the parties. In addition, the transaction system according to 
the invention is independent of the operators of larger public networks such as 
the GSM network, as well as blocking and fault coziditions in such networks. 

By implementing the service cards as virtual service cards in a mobile terminal 
the need for plastic cards is reduced, and maybe eliminated in the loz^^ term. 
The electronic wallet of the mobile terminal may act as a platform for a number 
30 of virtual service cards. 
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In addition, the capabilities of mobile terminals such as mobile phones and 
personal digital assistants (PDAs) open up for new applications, such as 
reading and storing information in connection with the service card 
transactions. For example, receipts and other information associated with a 
5 service card transaction may be stored in the mobile terminal, possibly for 
later transfer to a personal computer. 

According to a preferred embodiment of the invention, a nimiber of parameter 
values identifying a session to be completed by a service card transaction are 

10 transmitted by the mobile terminal to the transaction terminal. For example, 
the session may be a purdiase or an order of goods or services. When the 
session has been identified, the transaction terminal normally transmits 
information about the session, e.g. in the form of a bill, to the mobile terminal 
such that the service card transaction can be accepted or rejected based on 

15 thiR information. When the service card transaction has been accepted by the 
user of the mobile terminal, the transaction terminal commits the transaction. 

An alternative embodiment of the invention involves a mobile terminal that 
includes a card reader provided with a card slot for insertion of a real service 

20 card. In the case of a mobile phone, which already has a card place for a 
conventional SIM card, an additional card slot for the service card is provided 
in the mobile phone. The mobile terminal further comprises means for 
cormecting the mobile terminal to the wireless LAN to enable a service card 
transaction, related to the service card, between the mobile terminal and a 

25 transaction terminal via the wireless LAN. In a restaurant for example, instead 
of leaving the plastic card to a waiter, which takes the card and goes away to 
poform the service card transaction using an ordinary card reader, the user 
just inserts the service card into the mobile terminal, and the service card 
transaction is then performed over the wireless LAN. 

30 

Althoxigh the service card transactions performed over the wireless LAN 
preferably are financial transactions such as credit card and cash card 
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transactions, it should be understood that other types of transactions are 
feasible as well; for example transactions made when borrowing books at a 
library or when recording and giving discotmts to users or clients, or even 
transactions between an electronic key and an electronic door lock. 

5 

In the same way, it should be londerstood that the term service card not only 
relates to credit cards ar^^i cash cards, but also to other types of cards such as 
discount cards, bonus cards, membership cards, identity cards, company- 
identity cards, electronic key cards and combined cards including a 
10 combination of such cards. 

Hie invention offers the following advantages: 

A flexible transaction system and method; 
The need for ordinary plastic cards is reduced; 
15 - Ixcal transactions over relative^ loE^ distances are allowed; 
Several parallel transactions are easily handled; 
Public network independency, 

No need to hand over the service card to outside individuals; and 
Possibility to read and store information, such as receipts, associated 
20 with the service card transactions. 

Other advantages offered by the present invention will be appreciated upon 
reading of the below description of the embodiments of the invention. 

25 BRIEP DESCRIPTION OF THE DRAWINGS 

The invention, together with further objects and advantages thereof, will be 
best understood by reference to the following description taken together with 
the accompanyir^ drawings, in which: 

30 

Fig. 1 is a schematic diagram of a mobile terminal according to a preferred 
embodiment of the invention; 
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Fig. 2 is a diagram of a layered representation of the semce card fimctionality 
and its environment in the mobile terminal of Fig. 1 ; 

Fig. 3 is a sc±iematic diagram illustrating a first example of a transaction 
5 system according to a preferred embodiment of the invention; 

Fig. 4 is a schematic Hiagr gm illustrating a second example of a transaction 
system according to a preferred embodiment of the invention; 

10 Fig. 5 is a schematic diagram of screen displays in a mobile terminal, 
illustrating a procedure for identifying a session according to a preferred 
embodimmt of the invention; 

Fig. 6 is a schematic flow diagram of a transaction method according to a 
1 5 prefiMTed embodiment of the invention; 

Fig. 7 is a schematic diagram illustrating a third example of a transaction 
system according to a preferred embodiment of the invention; 

20 Fig. 8 is a rfiagry^Tn illustrating a first example of a commimication session 
performed in a sjrstem sudi as that illustrated in Fig. 7; 

Fig. 9 is a diagram illustrating a second example of a commimication session 
performed in a S3rstem such as that illustrated in Fig. 7; 

25 

Fig. 10 is a schematic diagram illustrating a fourth example of a transaction 
system according to a preferred embodiment of the inv^ition; 

F:^. 11 is a diagram illustrating a third example of a communication session 
30 performed in a sjrstem suda as that illustrated in Fig. 10; and 
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Fig. 12 is a schematic diagram of a transaction system according to an 
alternative embodiment of the invention; 

DETAILED DESCRIPTION OF EMBODIMENTS OP THE INVENTION 

Throughout the drawings, the same reference characters will be used for 
corresponding or similar elemraits. 

In order to avoid misconceptions, the following definitions are made: 

A virtual service card is a set of data, or a set of software-implemented 
operations and associated data, issued by a card issuer and used by a 
cardholder for the purpose of service card transactions. When using the card, 
the cardholder has to observe the poUcies and rules that may be requested by 
the card issuer. For example, a cash-card, which traditionally is represented 
on a smart card, will include software as weU as data when implemented as a 
virtual card, whereas a simple virtual service card will include onfy data. 

A service card transaction is an activity or a series of activities related to a 
service card and involving at least two parties. In general, the activity is carried 
on to conchision, and results in information being transferred from/to the 
service card. An example of a service card transactbn is an operation on a 
credit card such as reading data or changing data, eventually resulting in 
funds being transferred fix>m one account to another account Other examples 
of service card transactions are reading infonnation from a key card, and 
checking the authority of a cardholder. A transaction may of course be 
composed of a sequence of sinaller transactions, but in the following the 
concept of a session is introduced for a sequence of transactions and/or other 
events. The purpose is to reduce ambiguity and increase clarity. 
A session is a sequence of events and/ or transactions performed for a certain 
purpose. Throughout the disclosure, a session is normally associated with a 
service card tiansaction. In that case, the service card transaction constitutes 
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a part of the session, and typically the session is completed by the service card 
transaction. An example of a session is the purchase of goods in a shop, which 
at least involves registering of the selected items and paying with a credit card 
or cash card. Anotiier example of a session is the opening of an electronic lock 
5 with an electronic key, which at least involves reading key information, 
checking the authority of the key holder and maybe registering the event 

According to the present invention, a wireless local area network (wireless LAN) 
and one or more mobile terminals cormectable to the wireless LAN are used as 
10 a platform for service card transactions. 

Fig. 1 is a schematic diagram of a mobile terminal according to a preferred 
embodiment of the invention. Preferably, the mobile terminal is based on a 
mobile telephone or a personal digital assistant (PDA). The mobile terminal 10 
15 is by way of example illustrated as a mobile telephone. As a mobile telephone, 
the terminal 10 has a conventional memory (not shown), a display 2, a key pad 
4, a radio interface and anteima 5, a processing environment 6 such as a 
microprocessor, and a conventional microphone and speaker system (not 
shown). 

20 

Furthermore, service-card transaction functions are implemented in the 
mobile terminal, for example as software in the processing envirormient 6. The 
service-card transaction functions are preferably implemented as a general 
platform, a so-called electronic wallet, in the mobile terminal. In addition, a 
25 number of virtual service cards are implemented in the processing 
enviromnent 6. The virtual sendee cards are used together with the electronic 
wallet platform for service card transactions over the wireless LAN, and the 
platform preferably provides functionality that can be used by several virtual 
service cards. 

30 

A virtual service card is generally a set of data or a combination of software 
functions and associated data that can replace the functionality of its plastic 
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card counterpart Card informatioii, such as card number, e^iry date, 
cardholder and card issuer, associated with each one of the virtual cards is 
stored in mobile terminal 10. 

5 Fig. 2 is a diagram of a layered representation of the service card functionality 
and its environment in the mobile terminal of Fig. 1 , The bottom layer includes 
the mobile ter minal 10 with its j>rocessing capabilities, memory devices, power 
equipment, user interfiaces and a wireless IAN interface. Preferably, a Java 
Virtual Machine (JVM) 12 is implemented in the mobile terminal. Java is an 

10 example of a programming lai^uage that can be used to implement the 
electronic wallet platform 14 and a nimiber of virtual service cards (1, 2, 3, 4) 
16. Java is an object-oriented language, and as such it involves the 
encapsulation of software functions and data into objects, and is therefore 
suitable for preventing interference between the software and/ or data of 

15 diEferent virtual cards. Normally, the electronic wallet 14 provides general 
service-card transaction functions, whereas each one of the virtual service 
cards 16 may include card specific data and/ or software. The general service- 
card transaction functions of the electronic wallet platform include activation 
of selected virtual service cards, and reading and possibly writing relevant card 

20 information from and to the virtual service cards. 

In a more general sense, the electronic wallet may be viewed as the electronic 
coimterpart of a real wallet, including the general transaction functions as well 
as the virtual service cards. 

25 

In use, the electronic wallet in the mobile terminal 10 is normally accessed by 
entering a PIN-code. Next, the electronic wallet 14 with its transaction 
functions , and virtual service cards is operated, for example by using the 
display 2 and the keypad 4. 

30 

Different cards may have different requirements on security support ar^f^ 
input/ output capabilities. The mobile terminal to be used must fulfill all 
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requirements for the card, or otherwise the card will not be installed. Since 
different mobile terminals may have different hardware and software functions, 
the virtual card in itself is normally configured to handle different types of 
terminals. EXaring installation of a virtual card, the card normally finds out 
5 which kind of mobile terminal that is used, and then stores information about 
the capabilities of the terminal. 

Examples of virtual service cards are credit cards, cash cards, discount cards, 
bonus cards, membership cards, identity cards and electronic key cards. 
10 Furthermore, two or more cards can be combined into a combination card 
such as a combination of a credit card and a bonus card. 



It is advantageous to show, at command, a visual representation 3 of one or 
more virtual service cards on the display 2. In general, each virtual service 
15 card has its own characteristic appearance on the display 2 so as to facilitate 
the selection of service card. It is also possible to use a characteristic acoustic 
signal for each virtual card. 

The mobile terminal 10 also comprises a wireless LAN interface 8, which 
20 enables connection to a wireless LAN. Any wireless LAN interface known to the 
art, such as a conventional infrared LAN interface or a radio LAN interface, can 
be used by the invention. Preferably, however, a radio LAN chip based on 
Bluetooth technology is provided in the mobile terminal 10. The Bluetooth 
technology will be described in more detail later on. 

25 

In addition, the mobile terminal 10 may have a protecting circuit 7, also 
referred to as a protected circuit, for encapsulation, protection and/or 
encryption of sensitive information such as private key^, PIN-codes and 
possibly biometric codes such as electronic fingerprints. Preferably, the 
30 protecting circuit 7 is a physically enc^sulated integrated circuit that 
includes a non-erasable memory such as a read only memory (ROM) in which 
data and/ or software are stored. 
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Fig. 3 is a schematic diagram illustrating a first example of a a^saction 
system according to a preferred embodiment of the invention. The transaction 
S5rstem basically comprises a nximber of mobile terminals lOA, lOB, and a 
wireless LAN 20 that inclxides a number of transaction terminals 22, 24, 26. 

5 

Each one of the transaction tominals 22, 24, 26 in the wireless LAN 20 has 
service-card transaction functions and drcuitiy 23, 25 and 27, respectively for 
enabling communication with other terminals within the LAN 20. 

10 Each one of the mobile terminals lOA, iOB is identical to the mobile terminal 
described in connection with Pigs. 1 and 2. Consequentiy, each mobile 
terminal is provided with circiutiy for implementing service-card ti^saction 
functions and for implementing one or more virtual service cards. The mobile 
terminal is also provided with circuitry for connecting the mobile terminal to 

15 the wireless LAN 20 so as to enable a service card transaction, related to a 
virtual sendee card, between the mobile tprminal and a transaction terminal 
via the wireless LAN 20. 

In Fig. 3, the transaction terminals 22, 24, 26 as weU as the mobile terminals 
20 lOA, lOB are connected to and constitute part of the wireless LAN 20, as 
indicated by the dotted circle. The transaction system according to the 
invention is particularly useful for local service card transactions, financial 
and other service card transactions, at . place in for example shops, stores, 
companies and public utilities. 

25 

In general, a wireless LAN is a local area networic which does not utilize 
physical wires or cables as transmission medium. The two types of media 
normally used for wireless LANs are radio waves and infrared optical signals. 
Radio LANs are direction insensitive and generally have a greater ran^ of 
30 coverage than infrared LANs. 
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According to a preferred embodiment of the invention, the wireless LAN is a 
radio LAN based on Bluetooth, which is a local radio interface developed by the 
Bluetooth Special Interest Group promoted by Ericsson, Nokia, IBM, Toshiba 
and Intel. 

However, it should be understood that Blxietootfa is merely an example of a. 
wireless IAN technology that can be used by the invention. Other examples of 
wireless LANs include radio LANs such as HyperLAN, and even infrared LANs. 
In fact, any wireless LAN tiiat fulfils tiie foUowir^ requirements may be used 
by the invention: The terminals should be able to establish a connection, 
which may cany protocols involved in a session. This connection should be 
established either autonomously when entering the coverage area of a wireless 
LAN, or on demand when the terminal is within that area. The delay lantil the 
connection has been successfully estabUshed shoiald be short, at most a few 
seconds. Further, it is advantageous if no configuration in advance for a 
certain terminal or user is required. 

In the following, the invention will mainly be described with reference to 
Bluetooth as base technobgy for the wireless LAN. Bluetooth is a radio 
interface in iht 2.45 GHz frequency band that enables terminals to connect 
and c omrnnnic ate wirelessly via short-range local area networks (wireless 
LANs). Bluetooth is particularly suitable for, but not Kmited to, so-called ad 
hoc networks. 

In Bluetooth, each tmit can simultaneously communicate with several other 
units. Bluetooth uses a frequency-hop spread spectrum technique dividing the 
frequency band into several hop channels. Diaring a connection, the radio 
transceivers in the LAN hop from one channel to another in a pseudo=-random 
way. Bluetootii channels use a frequency-hop/ time-division-duplex (FH/TDD) 
scheme, and each channel is divided into 625 fis intervals, so-called slots, 
where a different hop frequency is used for each slot 
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In Bluetooth, two or more units sharing, the same channel form a so-called 
piconet (a LAN), in which one unit acts as a master, controlling the traffic in 
the piconet, and the other units act as slaves. Each piconet has a unique set of 
master parameters that are used in creating a xanique channel In each slot, a 
packet can be exchanged between the master and one of the slaves. Packets 
have a fixed format in Bluetooth, and each packet begins with a 72-.bit access 
code that is derived finom the master identity, and unique for the channel. The 
access code is used for packet identification, synchronization and offset 
compensation in the wireless LAN. A header tratts the access code, and a 
payioad of up to 2,745 bits may trail the header. 

Bluetooth units that are within range of each other can establish so-called ad 
hoc connections. Unlike ordinary cellular systems, there is no a priori 
distinction between terminals and base stations in Bluetooth. As mentioned 
above, two or more Bluetooth units that share a channel form a piconet To 
regulate trafBc on the channel, one of the participating units becomes a master 
of the piconet Any unit can become a master, but by definition, the unit that 
establishes the piconet assumes this role. All other participants are slaves. 
Participants may change roles if a slave wants to take over the master role. 
However, only one master at a time may exist in a piconet When units are not 
participating in a piconet, they enter standby mode, fix>m which they 
periodically listen for paigs messages. 

Furthermore, Bluetooth allows several piconets to be created with overlapping 
coverages. Each piconet then adheres to its own hopping sequence. 

More detailed information on Bluetooth can be found, e.g. in the article 
Bluetooth - The uruversal radio interface for ad hoc, iviieless oormectwity by J. 
Haartsen, Ericsson Review, No. 3, 1998, pages 1 10-1 17. 

It should be understood that the Bluetooth technology is an example of a base 
technology used to enable local communication between terminals, and that . 
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the service card transactions and the associated exchange of information are 
performed on top of this underlying technology. 

By \iang a wireless LAN, espedalfy a radio LAN such as Bluetooth, for local 
service card txaixsactions, relatively long distances between transaction 
terminals and mobile terminals can be handled. The system is also capable of 
handling several transactions polormed more or less in parallel between 
several parties, and irrespective of the distance between the parties, as long as 
the transactions are performed over the wireless LAN. 



With reference once again to Fig. 3, each one of the. transaction terminals 22, 
24, 26 in the wireless LAN 20 is preferably provided with a wireless LAN chip 
based on Bluetooth technology. Normally, one of the transaction terminals acts 
as master station of the wireless LAN 20. The master station 22 is often 
15 connected in a known manner via the public network and/or hard wire to a 
host server 32. In a conventional maimer, the host server 32 may provide 
additional functionality not included in the transaction terminals themselves. 

If the transaction terminals are used in cormection with ordinary cash 
20 registers, the transaction terminals may have functions to handle cash register 
sums from a cash register. Furthermore, the transaction terminals may have 
functions for on-line control of credit card numbers, and functions to transfer 
information about the tiraixsactions to senrers or host computers 32 of a bank 
or aredit card company. 

25 

In addition to the transaction functions xised for the virtual service cards, the 
transaction terminals may also include conventional card readers, such as 
ordinary card readers and card readers for contactiess cards so as to be 
capable of handling virtual service cards as well as ordinary plastic canls. In 
30 that case, tiie conventional card readers and the functionality used for the 
virtual service cards preferably share the same cash register functions and 
have common functions for communication with host servers. 
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It is of coiarse also possible to utilize the seciarity arrangements used for 
conventional cards and card readers in connection with service card 
transactions performed between termi n al s over a wireless LAN as weU. For 
e?:ample, if authentication by an identity card such as a driver's Hcense and a 
real signature on a receipt is required for a certain plastic card, this procedure 
may also be used for the virtual counterpart of the plastic card. However, full 
advantage of the virtual card concept according to the invention is obtained 
when authentication and confirmation are performed over the wireless IAN by 
using the electronic wallet and its capabilities. In general, mutual 
authentication and confirmation may be required. The SET (Secure Electronic 
Transaction) protocol, for example, is capable of handling mutual 
authentication and confirmation. 



Although the transaction system of Fig. 3 is illustrated as having two mobile 
termirxals, and three ti^ansaction terminals, it should be understood that only 
one mobile terminal and one transaction terminal are required in the wireless 
LAN to perform a service card transaction. The transaction terminals are not 
necessarily fixed terminals, but may be mobile. 

In addition to credit cards and cash cards, which are well known, a few other 
types of sendee cards that may be implemented as virtual service cards in a 
mobile terminal according to the invention will be discussed briefly below. 

A Ubraiy card is a sort of identity card by which a user can be identified as a 
registered user at a library. Information about a number of borrowed books 
together witii a last day for return may be transferred fi^m a transaction 
terminal at the library to the mobile terminal, and the user may then accept 
the loan. The virtual library card may have a Worid Wide Web (WWW) link to 
the home page of the Ubraiy where information on e.g. opening and closing 
hoiirs, late return fees, etc. can be found. 
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An electronic key card is a virtual card that replaces a conventional key or a 
conventional plastic key card for a door. A transaction terminal provided in 
connection to the door lock controls if the user of the virtual key card in the 
mobile terminal is authorized for aiccess tlirough the door. 

5 

A membership card is a service card that confirms membership in an 
association or club. For example, it is possible to use the virtual membership 
card as a combined membership and discoimt card if membership in the 
association in question entitles to discoimts in certain shops and stores. If the 
10 association has a clubhouse, the virtual card could also be used as a virtual 
electronic key. 

A company-identity card can be used as a virtual electronic key and as a 
means for identification in general. In addition, the virtual card may be used 
15 for payments e.g. in a company restaurant. The company may have 
agreements with shops, stores and gyms, and the card can then be used to get 
di^ounts. 

In Sweden, the pharmacy card is a sort of bonus card, on v^hich a purchase at 
20 a pharmacy will be registered and a discoiant given in accordance with 
predetermined rules. 

Preferably, the service card transactions over the vrireless LAN are financial 
transactions such as credit card and cash card transactions. In the foUovcdng, 
25 an example of how to perform a financial service card transaction between two 
parties or terminals in a wireless LAN will be described with reference to Figs. 
4 and 5. 

Fig. 4 is a schematic diagram illustrating a second example of a transaction 
30 system according to a preferred embodiment of the invention. The transaction 
S5^tem comprises a number of at least partially overlapping wireless LANs. In 
the example of Fig. 4, three wireless LANs A, B and C are illustrated, each of 
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which has a transaction terminal 22, 24 and 26, respectively. The transaction 
system further comprises two mobile terminals lOA, lOB that are within the 
coverage of at least one of the LANs. The mobile terminal lOB is within the 
coverage of two of the LANs A and B. 

5 

Assume by way of example that a transaction is to be performed between a 
mobile terminal lOB operated by a user and a transaction terminal of a 
wireless LAN operated by a salesman or merchant In a cormectivity layer of 
the wireless LAN, a connection between the mobile terminal and the 

10 transaction te rmin al is established. If the transaction terminal involved acts as 
master station of the wireless LAN, the mobile terminal and the transaction 
terminal communicate directly with each other. However, if the transaction 
terminal involved in the transaction is not a master station, comLmimication 
between transaction terminal and mobile terminal is normally, although not 

15 necessarily, performed via the master station of the wireless LAN. 



For financial transactions over the wireless LAN, a procedure is normally 
reqiaired to identify the session to be completed by the payment transaction 
and to ensure that payment is performed with the relevant transaction parties 

20 involved. The relevant transaction parties and the relevant session are 
identified by a n\amber of parameter values transferred over the wireless LAN. 
The number of parameter values necessary for this identification varies from 
case to case. Normally, the transaction terminal of the salesman knows which 
parameters are required to identify a session among a number of on-going 

25 sessions in the local network. The transaction terminal preferably transmits 
information about which parameters that are requested, or information on 
selectable parameter values for each one of the parameters to the mobile 
te rminal , and the mobile terminal then responds by transmitting the 
. parameter values. 

30 . 

If there is only one salesman and one transaction terminal, the session is 
identified in a qiiite straightforward manner. The same applies if there are 
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several transaction terminals, but only one active session to be completed by a 
transaction. 

However, if there are several transaction terminals with many active sessions, 
or if there are many different wireless LANs operated by different salesmen, the 
situation becomes more complex. With reference to Hg. 4, imagine a market- 
hall or shopping center with a mxmber of different shops, stands and 
restaurants, wh»e each shop/ stand may have several cash register terminals. 
Eadi shop, stand and restaiorant may have its own wireless LAN (a piconet^, 
and the wireless LANs in the market-hall may overlap each other, at least 
partially. When a customer has made a purchase in a shop and wants to pay 
by using the electronic wallet of the mobile terminal according to the invention, 
the wireless LAN of the shop in question has to be foimd, and then the correct 
cash register te rm i n al in the shop must be addressed in order to completefy 
identify the session. 

Fig. 5 is a schematic diagram of screen displays in a mobile terminal, 
illxistrating a procedure for identifying a session according to a preferred 
embodiment of the invention. If the mobile terminal receives signals from the 
wireless LANs of several salesmen, shops or restaiarants, the options may be 
presented, on the display 42 of the mobile terminal. The user of the mobile 
terminal preferably uses the key pad to select one of the wireless LANs, for 
example the LAN of shop or restaiarant 'B', and a parameter value 
representative of the selected wireless LAN is transmitted to the LAN in 
question. Next; if there are several alternative cash register terminals, i.e. 
transaction tenninals, these alternative terminals may also be presented as for 
exan^le menu options on the display 44 of the mobile terminal. The user of 
the mobile terminal selects one of the terminals and . a corresponding 
parameter valtie is transnaitted to the selected transaction terminal. 

Altemativefy, for example in a restaiirant, the transaction terminals transmit 
information about which parameters that are requested in order to identify a 
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session. This information may be presented on the display 46 of the mobile 
terminal, and the user then enters a number of parameter values that are 
subsequently transmitted over the wireless LAN. The session may be identified 
by using the nimaber of the table in the restaxirant, and if necessary even the 
5 seat at the table. Normally, the parameter value or values also identify the 
transaction terminal. The parameter value for the table may indirectly point 
out a particular transaction terminal assigned to this table. 

In other words, depending on the local conditions, a number of selections of 
10 parameter values have to be made in order to identify the transaction parties 
and the relevant session. 

The electronic wallet according to the invention may also include support for 
ordering of goods and services. In a restaurant for example, a menu can be 

15 transferred from a transaction terminal in the restaurant to the mobile 
te rminal of a user. Preferably, the menu is then displayed in the mobile 
terminal and the food can. be ordered by using the order functions of the 
electronic waUeL The order may be presented at a terminal for the waiter who 
subsequently transfers the' order to the kitchen. Alternatively, the order is 

20 presented at a terminal in the kitchen.. A session number is assigned to the 
order, and stored in the transaction terminal as well as the mobile terminal. At 
payment, the session number can be retrieved and used to identify the 
transaction. 

25 Preferably, the order is stored in the cash raster included in or connected to a 
transaction terminal of the restaurant The bill can then be produced on 
request and transferred to the electronic wallet of the user's mobile terminal 
without any interference of the waiter. 



30 



If the restaurant has a system for ordering, it can be used by employees of the 
restaurant If a guest does not have a mobile terminal eqiaipped with an 
, electronic wallet according to the invention, a waiter can use such a mobile 
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terminal to take the order and transfer it by using the electronic wallet therein. 
The bill is then easily produced, based on the electromc order. For additional 
flexibility and convenience; the terminal used by the waiter roay also include 
functions to print out the bill and an ordinary card reader for plastic cards. 

5 

When the relevant transaction parties and the relevant session has been 
identified, the relevant transaction terminal normally transmits a bill to the 
buyer so tiiat the he or she can check that the bill corresponds to the 
products/ services bought. When the transaction has been accepted, the buyer 

10 selects the credit card or cash card that he or she wants to use to complete the 
session. By using menu options or icons, a card is selected from the electronic 
wallet in the mobile terminal lOB. The electronic wallet piatfonn in the mobile 
terminal operates, in some sense, as a card reader and reads the relevant 
information, such as card number, card holder, card issuer and expiry date, 

15 from the selected virtual card. This information is transmitted to the 
transaction terminal by the LAN interface of the mobile terminal utilizing the 
seciority system that is associated with the currently used card. The 
transaction te rm i n al receives the service card information and commits, in 
response to an acceptance of the transaction, the payment transaction. By 

20 commit is meant that the transaction is carried on to a conclusion, seen form 
the perspective of the user of the mobile terminal. If appropriate, the 
transaction terminal transfers information to a server or host computer of a 
bank or credit card company, where the transaction is registered and funds 
eventually are transferred from the accoimt of the user to the account of the 

25 salesman. 

It is important that the card intended to be used, is indeed selected and used 
for the payment Therefore, it is advantageous to give visual displays of the 
virtual cards and/ or characteristic acoustic signals, as mentioned above in 
30 connection with Fig, 1. 
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Fig. 6 is a schematic flow diagram of a transaction method according to a 
preferred embodiment the invention. The transaction method according to the 
invention involves a mobile terminal, which has sendee-card transaction 
functions. In step 52, at least one virtual service card is implemented in the 
5 mobile terminal, and the service-card transaction functions include functions 
for handling the virtual service card. In step 54, the mobile terminal is 
connected to a wireless LAN which includes at least one transaction terminal, 
and in step 56 a service card transaction related to the virtual service card is 
performed between the mobile terminal and the transaction terminal via the 
10 wireless LAN. 

Fig. 7 is a schematic diagram illustrating a third example of a transaction 
system according to a preferred embodiment of the invention. Hie wireless LAN 
60 of the transaction system comprises two mobile terminals lOA, lOB and a 
15 single transaction terminal 22. Assume by way of example that the mobile 
tCTminal lOA is requesting the initiation of a transaction. 

Fig. 8 is a diagram illustrating a first example of a communication session 
performed in a systiem such as that illustrated in Fig. 7. First, the mobile 

20 terminal lOA transmits a request 70 to the transaction terminal 22 over the 
wireless LAN 60. If there is only one relevant on-going session, the transaction 
terminal 22 transmits information 72 about a session to be completed by a 
service card transaction, in response to the request 70. The session 
information 72 may include detailed information about the session; for 

25 example in the form of a bill with a specification of a purchase. Alternatively, 
the session information may simply be a cash register sxmi. Based on the 
session information, the user accepts or rejects the service card transaction, 
and the mobile terminal lOA then transmits an acceptance or rejection 74 of 
the transaction, normally together with service card information 74 to the 

30 transaction te rminal . The service card information normal^ includes a. service 
card number and associated information. In response to an acceptance of the 
.transaction, the transaction terminal 22 commits 76 the transaction. If 
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necessaiy, the transaction terminal 22 also transfers information to a server in 
a bank or other institution. 

Fig. 9 is a diagram ilhistrating a second example of a communication session 
perfomied in a system such as that illustrated in Fig. 7. First, the mobile 
terminal lOA transmits a request 80 to the transaction terminal 22 over the 
wireless LAN 60. In response to the request 80, the transaction terminal 22 
transmits information 82 on which parameter(s) that is requested to identify a 
session among a number of on-going sessions, or selectable parameter values 
for each one of the parameter(s). To identify a session, the user of the mobile 
terminal enters at least one parameter value 84 that is transmitted to the 
transaction terminal over the wireless LAN. Next, information 86 about the 
identified session is transmitted to the mobile terminal over the wireless LAN 
60. Based on this information, the user may accept or reject a service card 
transaction. If OK, the mobile terminal transmits an acceptance 88 to the 
transaction terminal 22. The mobile terminal lOA also transmits sendee card 
information 88, such as a service card nimiber or equivalent, to the 
transaction terminal 22. In response to an acceptance and the service card 
information, the transaction terminal 22 commits 90 the transaction. 

Fig. 10 is a schematic diagram illustrating a foxirth example of a transaction 
system according to a preferred embodiment of the invention. The wireless LAN 
100 of the transaction system comprises three transaction terminals 22, 24, 
26, and three mobile terminals lOA, lOB, IOC. 

Pig. 11 is a diagram, illustrating a third example of a commTmication session 
performed in a system such as that illustrated in Fig. 10. The mobile terminal 
IDA transmits a request 120 and at least one parameter vahie 124 that 
identifies a session associated a service card transaction over said wireless 
LAN. Preferably, tiie parameter value or values 124 are sent to the master " 
station 22 of the LAN 100. The parameter value or values 124 also identifies 
one of the tiransaction terminals of the LAN, and the.master station 22 informs 
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the identified transaction terminal. The identified transaction terminal 
transmits information 126 about the identified session to the mobile terminal 
over the wireless LAN. The mobile terminal receives the session information to 
eriable acceptance/rejection of the service card transaction based on this 
information, and an acceptance or a rejection 128 of the transaction is 
transmitted to the identified transaction terminal. The mobUe terminal, also 
transmits service card information 128 to the identified transaction terminal 
over the wireless LAN, and finally the transaction terminal commits 130 the 
transaction in response to an acceptance. 

Fig. 12 is a schematic diagram of a transaction system accordir^ to an 
alternative embodiment of the invention. The transaction system 200 of Fig. 12 
is similar to the system of Fig. 3, except for the mobile terminals llA, IIB. 
Each one of the mobile terminals llA, IIB includes a card reader for a real 
service card. Any ordinary card reader, such as a card reader provided with a 
card slot for insertion of a real plastic card or a contactless card reader, may 
be used by the invention. Preferably, the mobile terminals 1 lA, IIB are based 
on conventional dual-slot mobile phones, but it is possible to use other mobile 
terminals such as a PDA provided with a card reader. In the same way as for 
the mobile terminals 10 described above, each one of the mobile terminals 
11 A, 11 B further comprises means for connecting the mobile terminal to the 
wireless LAN 200 to enable a service card transaction, related to the real 
service card, between the mobile terminal and a transaction terminal via the 
wireless LAN. In use, the card reader reads informatfon from the service card. 
A software module executing in the processing environment of the mobile 
terminal handles the information and makes sure that the information is ready 
to be transmitted over the wireless LAN by a wireless LAN interface such as a 
Bhietooth chip. For smart cards, the card reader may write information to the 
card. 

Of course, it is possible to combine a card reader for real service cards and a 
"card reader" for virtual service cards in a mobile terminal according to the 
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invention. In that case, the electronic wallet softvrare that handles the virtual 
service cards may. also handle the information read from the real plastic 
service cards by the ordinary card reader. 

According to a further alternative embodiment of the invention, based on the 
information read by the card reader from the real plastic service card, a virtual 
counterpart, Le. a corresponding virtual service card, is generated by use of 
the electronic wallet software. 

More on seeurtty a^tects 

The electronic waUet platform according to the invention may support several 
different security levels. Different service cards may have different 
requirements on the security system. The lowest security level is mercfy based 
on the ownership of the mobile terminal. However, this is normally not the 
recommended level of security. 

Sensitive information such as card number, the identity of the cardholder and 
the card issuer and expiry date can be encrypted with the private key of the 
card issuer. This makes sure that this information can not be manipulated, 
but gives no protection for unauthorized duplication of the card. 

Storing a transaction number or a session number for each transaction 
facilitates a later review of performed tiransactions if ti^saction errors are 
SLispected. By using a procedure in which transaction mimbers are selected by 
the ti^saction terminal in a random way, and in which the mobile terminal 
stores tiie most recent ti^nsaction number to be sent over to the transaction 
terminal at a new ti^ansaction, certain types of fraiidulent behavior may be 
detected. For example, it is possible to detect a dupUcated card used in parallel 
with the ordinary card. 



The \ise of biometric procedures may provide a higher security level than the 
•use of PIN-codes. Examples of such biometric procedures include scanning of 
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fingerprints, voice recognition mechanisms, and the use of digital signatures. 
These biometric methods may replace the.PIN-code or used as a complement. 

Storing and checking PIN-codes and/ or biometric codes in special hardware 
5 may provide a higher level of security than that obtained when storing the PIN- 
code in a conventional computer memory. The special hardware can either be 
provided at the SIM card of the mobile terminal, if such a card exists, or 
provided at an additional smart card. It is also possible to use a built-in 
hardware function for this p^Irpose. The hardware should have functions for 
10 limiting the number of unsuccessful attempts to access the card or the 
electronic wallet 

A security function commonly required by many service cards is encryption by 
a private key to prove authentication. By implementing the 

15 encryption/ protecting circuit in protected hardware, and storing the k^ in the 
same hardware, it is possible to seciirely hide the key. Normally, a certificate is 
issued by a so-called Certification Authority. The certificate binds a person to a 
predetermined public k^. More information on certificates, private keys and 
public keys can be foimd e.g. in the book Understandirig Digital SiffnatUTBS by 

20 G. L. Grant, McGraw-HiU, New York, 1998, pagps 123-126. 

Standardized protocols for different tjrpes of transactions do exist and new 
protocols are being developed. An example is the SET-protocol (Secure 
Electronic Transaction). SET is primarily intended for credit card transactions 

25 over the Internet The main security goals of SET are information 
confidentialit5% payment information integrity and merchant/ caniholder 
authentication. With SET it is possible to protect e.g. the cardholder's credit 
card number, and make sure that only authorized parties can use. it More 
information on SET can be found e.g. in the book Understanding Digital 

30 Signatiires by G. L. Grant, McGraw-Hill, New York, 1998, pages 110-116. 
According to an embodiment of the invention, such a protocol is implemented" 
.in the transaction system according to the invention. 
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It should be understood that public wireless telecommunication networks, 
such as the GSM network using the WAP protocol (Wireless AppHcation 
Protocol), may be used by the mobile phones according to the invention for 
service card transactions over longer distances in a traditional manner. 

5 • . • • ' 

The embodiments described above are merely given as examples, and it should 
• be understood that the . present invention is not limited thereto. Further 
modifications, changes and improvements which retain the basic underlying 
principles disclosed and claimed herein are within the scope and spirit of the 
10 invention. 
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CLAIMS 

1. A transaction system comprising at least one mobile terminal (10) having 
service-card transaction functions, 

5 characterized iri that said system further comprises at least one wireless LAN 
(20; 60; 100; A,B,C) having at least one transaction terminal (22,24,26); and 
said mobile terminal further comprises: 

- means (6,12) for implementing at least one virtual service card (16), 
said service-card transaction functions including functions for handling said 

10 virtual service card; 

- means (8) for connecting said mobile terminal to said wireless LAN to 
enable a service card ti^saction associated vrith said virtual service card (16) 
between said mobile terminal and said transaction terminal via said wireless 
LAN. 

15 

2. The sjrstem according to daim 1, 

characterized in that said mobile terminal comprises means for transmitting at 
least one parameter value identifying a session associated with said 
transaction to said transaction terminal over said wireless LAN. 

20 

3. The system according to claim 2, 

characterized in that said wireless LAN comprises means for transmitting 
information on which parameter(s) tiiat is requested, and/or information on 
selectable parameter values for each one of said parameter(s) to said mobile 
25 terminal. 

4. The sjrstem according to claim 2, 

characterized in that said wireless LAN comprises a plurality of transaction 
terminals, and said parameter value or values identifies one of said transaction 
30 terminals. 
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5. The system according to rlaim 2, 

characterized in that said mobile terminal comprises means for transmitting 
an order of a product or sendee to said transaction terminal, a session number 
being assigned to said order in said mobile terminal as well as in said 
transaction terminal and used, as said at least one parameter value to identify 
said order session. 

6. The system according to daim 1, 

characterized in that said means (6,12) for implementing at least one virtual 
service card (16) includes means for generating a visual representation (3) of 
said service card or cards in said mobile terminal. 

7. "nae S3^tem according to claim 1, 

characterized in that said virtual sendee card is selected ftom the group of: a 
credit card, a cash card, a discount card, a bonus card, a membership card, 
an identity card, a company-identity card, aii electronic key card and a 
combination card including a combination of such cards. 

8. The ssrstem according to Haim 

characterized in that said service-card transaction functions are credit card or 
cash card ti^saction functions, and said virtual service card is a virtual credit 
card or a virtual cash card. 

9. T^e system according to claim 1, 

characterized in that said virtual service card includes service card specific 
software and riata 



10. The system according to Hatm i ^ 

characterized in that said mobile tenfdnal further comprises means for 
tiransmitting a request to said transaction terminal over said wireless LAN; 
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said transaction terminal comprises means for transmitting, in response 
to said request, infomiation about a session associated with said transaction 
to said mobile terminal over said wireless LAN; 

said mobile terminal further comprises means for receiving said session 
5 information to enable acceptance/ rejection of said transaction based on said 
session information, and for transmitting an acceptance or a rejection of said 
transaction to said transaction terminal over said wireless LAN; 

said mobile terminal further comprises means for transmitting service 
card information to said transaction terminal over said wireless LAN; and 
10 said transaction terminal comprises means for committing said 

transaction in response to said service card inforaiation and to an acceptance 
of said transaction. 

11. The system according to claim 1, 
15 characterized in that said mobile terminal further comprises means for 
transmitting a request to said transaction terminal over said wireless LAN; 

said mobile terminal further comprises means for transmittal at least 
one parameter value identifying a session associated with said transaction to 
said transaction terminal over said wireless LAN; 
20 said transaction terminal comprises means for transmitting, in response 

to said session identifying parameter value, information about said session to 
said mobile terminal over said wireless LAN; 

said mobile terminal further comprises means for receiving said session 
information to enable acceptance /rejection of said transaction based on said 
25 session information, and for transmitting an acceptance or a rejection of said 
transaction to said transaction terminal over said wireless LAN; 

said mobile terminal further comprises means for transmitting service 
card information to said transaction terminal over said, wireless LAN; and 

said transaction terminal comprises means for committing said 
30 transaction in response to said service card information and an acceptance of 
said transaction. 
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12. The system according to claim 1, 

characterized in that said wireless LAN (20; 100} comprises a plurality of 
transaction terminals; 

said mobile terminal further comprises means for transmitting a 
5 transaction request and at least one parameter value identifying a session 
associated with said transaction over said wireless LAN, wherein said 
parameter value or values at the same time identifies one of said transaction 
terminals; 

said identified transaction terminal comprises means for transmitting 
10 information about said session to said mobile terminal over said wireless LAN; 

said mobile terminal further comprises means for receiving said session 
information to enable acceptance/rejection of said transaction based on said 
session information, and for transmitting an acceptance or a rejection of said 
transaction to said identified transaction terminal over said wireless LAN; 
15 said mobile terminal further comprises means for transmitting service 

card information to said identified transaction terminal over said wireless LAN; 
and 

said identified transaction terminal comprises means for committing said 
transaction in response to said service card information and to an acceptance 
20 of said transaction. 

13. The system according to claim 1, 

characterized in that said wireless LAN (20; 100) comprises a pliarality of 
transaction terminals and a master station (22); 

25 said mobile terminal further comprises means for transmitting a 

transaction request and at least one parameter value identifying a session 
associated with said transaction to said master station (22) over said wireless 
LAN, wherein said parameter value or values at the same time identifies one of 
said transaction terminals and said master station informs the identified 

30 transaction terminal; 

said identified transaction terminal comprises means for transmitting 
information about said session to said mobile terminal over said wireless LAN; 
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said mobile terminal further cx^mprises means for receiving said session 
information to enable acceptance /rejection of said transaction based on said 
session information, and for transmitting an acceptance or a rejection of said 
tramsaction to said identified transaction terminal over said \)rtreless LAN; 
5 said mobile terminal further comprises means for transmitting semce 

card information to said identified transaction terminal over said wireless LAN; 
and 

said identified transaction terminal comprises means for committing said 
transaction in response to said service card information and to an acceptance 
10 of said transaction. 

14. The system according to claim 1, 

characterized in that said transaction system comprises a plurality of 
overlapping wireless LANs (A,B,C); and 
15 said mobile terminal further comprises means for transmitting at least 

one parameter value identifying a session associated with said transaction over 
said vioreless LANs, wherein said parameter value or values at the same time 
identifies one of said overlapping wireles^s LANs such that further 
commimication is performed within the identified wireless LAN. 

20 

15. The system according to rlairn I, 

characterized in that said mobile terminal is based on a mobile telephone or a 
personal digital assistant (PDA). 

25 16. A mobile terminal having service-card transaction functions, 
characterized in that said mobile terminal (10) further comprises: 

- means (6,12) for implementing at least one virtual service card (16), 
said service-card transaction functions including functions for handling said 
virtual service card; 

30 - means (8) for connecting said mobile terminal to a wireless LAN (20; 

60; 100; A,B,C) including at least one transaction terminal (22,24,26) to 
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perform a service card transaction related to said virtual service card between 
said mobile terminal and said transaction terminal via said wireless LAN. 

17. The mobile terminal according to claim 16, 

.5 chaiBcterized in that said mobile temmial further comprises means for 
transmitting at least one parameter vahie identifying a session associated v^dth 
said transaction to said transaction terminal over said wireless LAN. 

18. The mobile terminal according to claim 16, 

10 charactCTized in that said means (6,12) for iniplementing at least one virtual 
service card (16) incltides means for generating a visual representation (3) of 
said service card or cards in said mobile terminal. 

19. The mobOe terminal according to f^la^m 16, 

15 characterized in that said virtual service card is selected firom the group of: a 
credit card, a cash card, a discount card, a bonus card, a membership card, 
an identity card, a company-identity card, an electronic key card and a 
combination card including a combination of such cards. 

20 20. The mobile termiiial according to claim 16, 

characterized in that said servicencard transaction functions are credit card or 
cash card transaction functions, and said virtual service card is a credit card 
or a cash card. 

25- 21. The mobile terminal according to claim 16, 

characterized in that said virtual service card includes service card specific 
software and data. 

22. The mobile terminal according to claim. 16, 
30 characterized in that it further comprises- a protecting circuit, with encryption 
capabilities, implemented in hardware, and that an encryption is stored 
witiiin said hardware to securely hide said encryption key. 
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23. The mobile terminal according to claim 16, 

characterized in that said mobile terminal is based on a mobile telephone or a 
personal digital assistant (PDA). 

5 24. A transaction method involvic^ a mobile terminal having service-card 
transaction functions, 

characterized in tihat said method comprises the steps of: 

- implementing (52) at least pne virtual service card in said mobile 
terminal (10), said service-card transaction functions including functions for 

10 handling said virtual service card; 

- connecting (54) said mobile teraiinal to at least one wireless LAN (20; 
60; 100; A,B,C) comprising at least one transaction terminal (22,24,26); 

- performing (56) a service card transaction related to said virtual service 
card between said mobile terminal and said transaction terminal via said 

15 wireless LAN. 

25. The method according to claim 24, 

characterized in that said method further comprises the step (84, 124) of said 
mobile terminal transmitting at least one parameter value identifying a session 
20 associated with said transaction to said transaction terminal over said wireless 
LAN. 

26. The method according to claim 25, 

characterized in that said method further comprises the step (82, 122) of 
25 transnutdng information on which parameter(s) that is requested, and/or 
information on selectable parameter value(s) for each one of said parameter(s) 
to said mobile terminal. 

27. The method according to claim 25, 

30 characterized in ttiat said wireless LAN comprises a plurality of transaction 
terminals, and said parameter value identifies one of said transaction 
terminals. 
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28. The method according to claim 25, 

chaxacterized in that said method farther comprises the step of said mobile 
terminal transmitting an order of a product or sendee to said transaction 
• . terminal; 

5 assigning a session number to said order in said mobile terminal as well 

as in said transaction terminal, said, session number being used as said at 
least one parameter value to identify said order session. 

29. The method according to claim 24, 

10 diaracterized in that said method further comprises the steps of: 

said mobile terminal transmitting a request (70; 80; 120) to said 
transaction terminal over said wireless LAN; 

said transaction terminal transmitting, in response to said request, 
information (72; 86; 126) about a session associated with said transaction to 
15 said mobile terminal over said wireless LAN; 

said mobile terminal receiving said session information to enable 
acceptance/rejection of said transaction based on said session information, 
and transmitting an acceptance or rejection (74; 88; 128) of said transaction to 
said transaction terminal over said wireless LAN; 
20 said mobile terminal transmitting service card information (74; 88; 128) 

to said transaction terminal over said wireless LAN; and 

said trans£iction terminal committing (76; 90; 130) said transaction in 
resp>onse to said service card information and an a.cceptance of said 
transaction. 

25 

30. The method according to claim 24, 

characterized in that said method further comprises the steps of: 

said mobile terminal transmitting a request (80; 120) to said transaction 
terminal over said wireless LAN; 
30 said mobile terminal transmitting at least one parameter value (84; 124) 

identifying a session associated with said transaction to said transaction 
terminal over said wireless LAN; 
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said transaction terminal transmitting^ in response to said session 
identiiying parameter value, infomiation {86; 126) about said session to said 
mobile terminal over said wireless LAN; 

said mobile terminal receiving said session information to enable 
5 acceptance/ rejection of said transaction based on said session ■ information, 
and transmitting an acceptance or a rejection (88; 128) of said transaction to 
said transaction terminal over said wireless LAN; 

said mobile terminal transmitting service card information (88; 128) to 
said transaction terminal over said wireless LAN; and 
10 said transaction terminal committing (90; 130) said transaction in 

response to said service card information and an acceptance of said 
transaction. 

31. The method according to claim 24, wherein said wireless LAN (20; 100) 
15 comprises a pliirality of transaction terminals (22, 24, 26), 

characterized in that said method further comprises the steps of: 

said mobile tenninal transmitting a transaction request (120) and at least 
one p>arameter value (124) identifying a session associated with said 
transaction over said wireless LAN, wherein said parameter value or values 
20 (124) at the same time identifies one of said transaction terminals; 

said identified transaction terminal transmitting information (126) about 
said session to said mobile terminal over said wireless IAN; 

said mobile terminal receiving said session information to enable 
acceptance/ rejection of said transaction based on said session information, 
25 and transmitting an acceptance or a rejection (128) of said transaction to. said 
. identified transaction terminal over said wireless LAN; 

said mobile terminal transmittir^ service card information (128) to said 
identified transaction terminal over said wireless LAN; and 

said identified transaction terminal committing (130) said transaction in 
. 30 response to said service card information and to an acceptance of said 
transaction. 
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32. The method according to daim 24, wherein said wireless LAN (20; 100) 
comprises a piurality of transaction tenninals and a master station (22), 
characterized in that said method further comprises steps of: 

said mobile terminal transmitting a transaction request (120) and at least 
5 .one parameter value (124) identifying a session associated with said 
transaction to said master station (22) over said wireless LAN, wherein said 
parameter value or values (124) at. the same time identifies one of said 
transaction ter min a l s, and said master station (22) informs the identified 
transaction terminal^ 

10 said identified transaction terminal transmitting information (126) about 

said session to said mobile terminal over said wireless LAN; 

said mobile terminal receiving said session information to enable 
acceptance/rejection of said transaction based on said session information, 
and transmitting an acceptance or a rejection (128) of said transaction to said 
15 identified transaction terminal over said wireless LAN; 

said mobile terminal transmittii^ service card information (128) to said 
identified transaction tCTminal over said wireless LAN; and 

said identified transaction terminal committing (130) said transaction in 
response to said service card information and to an acceptance of said 
20 transacticm. 

33. The method according daim 24, 

characterized in that said method further comprises the steps of: 

said mobile terminal transmitting at least one parameter value identifying 
25 a session associated with said transaction over a plurality of overlapping 
wireless LANs (A3,C), wherein said parameter value or values at the same 
time identifies one of said overlapping wireless LANs such that further 
communication is pCTformed within the identified wireless LAN. 



30 34. A transaction system comprising at least one molale terminal having a 
card reader for a real service card, 
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characterized in that said system further comprises at least one wireless LAN 
having at least one transaction terminal; and 

said mobile terminal further comprises means for connecting said mobile 
terminal to said wireless LAN to enable a service card transaction, related to 
said service card, between said mobile terminal and said transaction terminal 
via said wireless LAN. 

35. The transaction system according to claim 34, 

characterized in that said mobile terminal further comprises means for 
implementing a virtual sendee card to enable a service card transaction related 
to said virtual service card over said wireless IAN. 

36. The transaction system according to claim 34, 

characterized in that said mobile terminal further comprises means generating 
a virtual service card based on information read by said card reader from said 
real service card. 

37. The transaction system according to claim 34, wherein said mobile 
terminal is a dual-slot mobile telephone. 
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